CVE-2024-28114: Python Jinja2 Unsafe Environmentcve-2024-28114-python-jinja2-unsafe-environment
Using `jinja2.Environment` without restrictions to render dynamically provided templates allows for Server-Side Template Injection (SSTI). An attacker can execute arbitrary OS commands by abusing the unrestrained environment. Keep data and templates separate or switch to `jinja2.sandbox.SandboxedEnvironment` if dynamic template inputs are strictly required.
